some business rules on server side verified